cedar_policy 0.2.0-x64-mingw32 → 0.3.0-x64-mingw32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab536cf3002ce4eebbf7f90c9a88f8d85ac035446d424de4b9f49e95fbc88782
-  data.tar.gz: 00c6df360037f83ce52758f3427cf03f96c8d09968ad6d4580c0475bbce69003
+  metadata.gz: 4943f5686e7bfe710ef7f2eb2cfeedc8b19fa20d79edf7b98d7c15ed717b2bcc
+  data.tar.gz: 169405ac1f5bffdc6ddb4330f147f3ed65785f5607007ea0a15409ac64668eb9
 SHA512:
-  metadata.gz: 467ef17beeaf3ee92b60e62734299ee7602280c559cc9565c852b761025424cad9053c366945f6d3c2bfa7e0f9906b28eb69375bbcbe17360253a942c99dadcd
-  data.tar.gz: 179b6652e9d62c3f015fcf0b561898c12e2b3d47978709c1fe7f1e62ef1b7c567aea18968a583b199cdcac6d982211bf2dcd53abcae683d93718a9cb0f03ce6d
+  metadata.gz: 93f3ec8578c318ccb2f08b0a91f3d7a6fa9337dd13349ae84377031e7047a7a731a4dc3c5897fb9c57f9e94cbfdeff9afc80866f603602e89399b48f69b8b3b9
+  data.tar.gz: 2e5f6563a420f3e07d3f311c4bbe68d74cafb90a3cba075573937fb703a46822b7c7359b57a0291c59a99339106823955c0e3d4ac1fde243f0d7af3cccff4784

data/.rubocop.yml

@@ -1,6 +1,8 @@
 AllCops:
   NewCops: enable
   TargetRubyVersion: 3.0
+  SuggestExtensions: false
+
 
 Style/StringLiterals:
   EnforcedStyle: double_quotes

data/README.md

@@ -18,6 +18,10 @@ If bundler is not being used to manage dependencies, install the gem by executin
 > [!WARNING]
 > This gem is still under development and the API may change in the future.
 
+### PolicySet
+
+Define a policy by Cedar Language:
+
 ```ruby
 policy = <<~POLICY
           permit(
@@ -27,28 +31,75 @@ policy = <<~POLICY
           );
         POLICY
 policy_set = CedarPolicy::PolicySet.new(policy)
+```
+
+> Currently, the single policy is not supported.
 
-principal = CedarPolicy::EntityUid.new("User", "1")
+### Request
+
+Prepare the Entity's ID via `EntityUid` or an object with `#to_hash` method which returns a hash with `:type` and `:id` keys.
+
+```ruby
+principal = CedarPolicy::EntityUid.new("User", "1") # or { type: "User", id: "1" }
 action = CedarPolicy::EntityUid.new("Action", "view")
 resource = CedarPolicy::EntityUid.new("Image", "1")
-ctx = CedarPolicy::Context.new
+```
 
+The `Context` object is used to store the request context. Use `Context` or an object with `#to_hash` method which returns a hash.
+
+```ruby
+ctx = CedarPolicy::Context.new({ ip: "127.0.0.1" }) # or { ip: "127.0.0.1" }
+```
+> The `Context` object can initialize without any arguments as an empty context.
+
+Create a `Request` object with the principal, action, resource, and context.
+
+```ruby
 request = CedarPolicy::Request.new(principal, action, resource, ctx)
+```
 
+### Entities
+
+Define the entities with related this request. It should be an array of `Entity` objects which have `#to_hash` method returns a hash with `:uid`,`:attrs`, and `:parents` keys.
+
+```ruby
 entities = CedarPolicy::Entities.new([
     CedarPolicy::Entity.new(
         CedarPolicy::EntityUid.new("User", "1"),
-        { role: "admin" }
-    )
+        { role: "admin" },
+        [] # Parents' EntityUid
+    ),
+    {
+        uid: { type: "Image", id: "1" },
+        attrs: {},
+        parents: []
+    }
 ])
+```
 
+### Authorizer
+
+Create an `Authorizer` object and authorize the request with the policy set and entities.
+
+```ruby
 authorizer = CedarPolicy::Authorizer.new
+```
+
+If boolean result is enough, use `#authorize?` method.
+
+```ruby
 authorizer.authorize?(request, policy_set, entities) # => true
+```
 
+If you want to get the decision object, use `#authorize` method.
+
+```ruby
 response = authorizer.authorize(request, policy_set, entities)
 response.decision # => CedarPolicy::Decision::ALLOW
 ```
 
+> The diagnostics is not supported yet in the response.
+
 ## Roadmap
 
 * [ ] Add DSL to improve developer experience

data/lib/cedar_policy/entities.rb

@@ -3,8 +3,20 @@
 module CedarPolicy
   # :nodoc:
   class Entities
+    include Enumerable
+
     def initialize(entities = [])
-      @entities = Set.new(entities)
+      @entities = Set.new(entities.map do |entity|
+        next entity if entity.is_a?(Entity)
+
+        Entity.new(*entity.values_at(:uid, :attrs, :parents))
+      end)
+    end
+
+    def each(&block)
+      return enum_for(:each) unless block_given?
+
+      @entities.each(&block)
     end
 
     def to_ary

data/lib/cedar_policy/entity.rb

@@ -6,15 +6,19 @@ module CedarPolicy
     attr_reader :uid, :attrs, :parents
 
     def initialize(uid, attrs = {}, parents = [])
-      raise ArgumentError unless uid.is_a?(EntityUid)
+      raise ArgumentError unless uid.is_a?(EntityUid) || uid.is_a?(Hash)
 
-      @uid = uid
+      @uid = if uid.is_a?(EntityUid)
+               uid
+             else
+               EntityUid.new(*uid.values_at(:type, :id))
+             end
       @attrs = attrs
       @parents = Set.new(parents)
     end
 
-    def ==(other)
-      hahs == other.hash
+    def eql?(other)
+      hash == other.hash
     end
 
     def hash

data/lib/cedar_policy/entity_uid.rb

@@ -8,11 +8,14 @@ module CedarPolicy
     def initialize(type_name, id)
       @type_name = type_name.to_s
       @id = id.to_s
+
+      freeze
     end
 
-    def ==(other)
+    def eql?(other)
       hash == other.hash
     end
+    alias == eql?
 
     def hash
       [self.class, @type_name, @id].hash

data/lib/cedar_policy/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module CedarPolicy
-  VERSION = "0.2.0"
+  VERSION = "0.3.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cedar_policy
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: x64-mingw32
 authors:
 - Aotokitsuruya
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-08-14 00:00:00.000000000 Z
+date: 2024-09-07 00:00:00.000000000 Z
 dependencies: []
 description: Ruby bindings for Cedar policy evaluation engine.
 email: